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Amendments to the Claims; 

This listing of claims win replace all prior versions, and listings, of claims in the application: 
Listing of Claims* 

1- (currently amended) A method for remotely accessing a service provided 
by a server in a data communication system in which remote access to the service from a 
terminal device of a user of the service requires transmission to the server of a valid expendable? 
single-use password at log-on to the service, comprising the steps of: 

providing the user of the service with a set of CTcpondablo single-use passwords 
for remotely accessing the service via a network of the data communication system; 

storing the provided set of e xpendable single-use passwords on the terminal 
device of the user; 

setting up a connection via the network to the server from the terminal device to 
enable use of the service by the user from the terminal device; 

selecting from the stored set of e xpendable* single-use passwords, automatically 
by the terminal device at user log-on to the service, an unused one of the stored single^use 
passwords for use in logging-on to the service; 

registering the sel ected password as used at the terminal device to thereby prevent 
unintended reuse of a used password: 

transmitting the selected password to the server by adding the selected password 
to a connection setup signal transmitted from the terminal device to the server via the network to 
remotely log-on to the service from the terminal device of the user; 

receiving the connection setup signal at the server and identifying, in the 
connection setup signal, the selected password transmitted from the terminal device of the user; 
and 

validating the identified password at the server for one of allowing and denying 
access to the service from the terminal device based on said validating of the password. 

2. (canceled) 
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3. (currently amended) A method in accordance with claim 1, further 
comprising the step of updating the ^ead^e single-use passwords stored on the terminal 
device by transmitting a new set of expendable single-use passwords from the server to the 
terminal device via the network. 

4. (currently amended) A method in accordance with claim 1, further 
comprising the step of transmitting, from the terminal device to the server via the network, an 
order for a new set of expendable) single-use passwords when each of the passwords stored on the 
terminal device has been used to remotely log-on to the service from the terminal device. 

5. (currently amended) A method in accordance with claim 1 , 

wherein said step of storing comprises storing on the terminal device of the user a 
plurality of sets of oxpondablo single-use passwords, each of said sets comprising a plurality of 
oxpondablo single-use passwords for use in accessing a corresponding one of a plurality of 
remotely-accessible services available to the user; and 

wherein said step of selecting comprises selecting a one of said plural sets of 
stored passwords for use with the corresponding one of the plural services to be accessed by the 
user and selecting from the selected one of the plural sets a one of the stored passwords of the 
selected set for use in logging-on to the corresponding one of the plural service. 

6. (currently amended) In a data communication system in which a remote 
user of a service provided by a server on a network of the system is required to transmit to the 
server a valid e xpendable single-use password, from a set of e xpondoblo single-use passwords 
provided to the user, in order to obtain remote user-access to the service via the network, the 
improvement comprising a terminal device connected to the network for use by the user in 
remotely accessing the service via the network, said terminal device comprising: 

storage means for storing at the terminal device the set of expendable single-use 
passwords provided to the user for use in remotely accessing the service from the terminal device 
via the network; 
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selecting means for automatically selecting, from the stored set of expendable? 
single-use passwords at user log-on to the service, an unused one of the stored passwords for use 
in remotely logging-on to the service from the terminal device; 

means for registering, at the terminal dev i ce, each of the stored passe s wh^n 
said each password has been used to remotely log-on to the se r vice from the terminal device tn 
thereby prevent uninte nded reuse of a used nasswmd; and 

adding means for automatically adding, to a connection setup signal to be 
transmitted from the terminal device to the server over the network to remotely log-on to the 
service from the terminal device of the user, the one of the stored passwords selected by said 
selecting means. 

7. (canceled) 

8. (currently amended) In the data communication system of claim 6, 
wherein the server includes means for updating the exp e ndable single-use passwords stored at 
the terminal device by transmitting a new set of e xp e ndable single-use passwords from the server 
to the terminal device via the network, said terminal device further comprising means for 
receiving a set of passwords from the server via the network. 

9. (currently amended) In the data communication system of claim 6, said 
terminal device further comprising means for automatically ordering, from the server via the 
network, a new set of expendable) single-use passwords for use in logging-on to the service when 
each of the passwords stored at the terminal device has been used to remotely log-on to the 
service from the terminal device. 

10. (currently amended) In the data communication system of claim 6, said 
storage means of said terminal device comprising means for storing a plurality of sets of 
exp e ndable single-use passwords, each said stored set of e xpendable^ single-use passwords 
comprising a plurality of exp e ndable single-use passwords for use in remotely accessing a 
corresponding one of a plurality of services remotely-accessible by the user of the terminal 
device. 
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1 1. (currently amended) In the data communications system of claim 10, said 
selecting means comprising means for automatically selecting, from a one of the plurality of 
stored sets of oxpondablo single-use passwords for use with the corresponding one of the plural 
services to be accessed by the user, a one of the e xpendabl e single-use passwords from said one 
set for use in logging-on to the corresponding one of the plural services. 

12. (original) In the data communication system of claim 6, wherein the 
network comprises a wired telecommunication network, and wherein said terminal device 
comprises a telephone set in the wired network. 

13. (original) In the data communication system of claim 6, wherein the 
network is a mobile communication network, and wherein said terminal device comprises a 
mobile station of the mobile network. 



14. (original) In the data communication system of claim 13, wherein the 
network is a GSM network and said terminal device comprises a GSM mobile telephone, said 
terminal device further comprising a subscriber identity module that implements said selecting 
means and said adding means in software on said subscriber identity module. 

15. (currently amended) In a fee data communication system of claim 14, in 
which a remote user of a service provided by a server on a network of the system is required to 
transmit to the server a valid expen dable password, from a se t of ^enHa hle passwords provided 
to the user, in order t o obtain remote user-access to the service via the network, the improvement 
comprising a terminal device connected to the network for use bv the user in remotely accessing 
the service via the network, said terminal device comprising : 

storage means for storing at the terminal device the set of expendable passwords 
provided to the user for use in remotely accessing the service from the terminal device via the 
network: 
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selecting means for automatically selectin g fh>m the stored set of exp ^M* 
passwords user log-on to the service, one of the stored j mm mdB for use in remotely lo^ np- 
on to the s ervice from the terminal device: and 

adding means for automatically adding to a connection setup gip n ? 1 h„ 
transmitted from the terminal device to the server over th e network to remotely log-on to th* 
service from the terminal device of the user the one of t he stored p as swords selected h Y ^iH 
selecting means, wherein the network is a G SM network and said terminal device compri^ a 
GSM mobile telephone, said terminal device further co m prising a subscriber identity module that 
implements said $electing means and s a id adding means in software on said subscriber identity 
module. 

said software on the subscriber identity module further comprising means for 
identifying the service by a telephone number entered by the user at the terminal device to access 
the service, and said adding means further comprising means for appending, to the telephone 
number, a predetermined number of digits characterizing the one of the stored passwords 
selected by said selecting means. 

16. (previously presented) In the data communication system of claim 14, said 
subscriber identity module further comprising a service directory storing information specifying 
a plurality of services accessible by the user of the terminal device, service identifier data for 
each of the accessible services, and password file names to be used in conjunction with remote 
user access to the plural services. 

17. (original) In the data communication system of claim 16, said service 
directory further comprising a pointer for each of the plural services and arranged to point to a 
first unused password in the set of passwords to be used to attain access to a corresponding 
service and to be updated to point to a sequentially-next unused password in the set of passwords 
for the corresponding service as each stored password is used to access the corresponding 
service. 

18. (currently amended) In the data communication system of claim 14, said 
software on the subscriber identity module further comprising means for automatically ordering, 
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from the server via the network using the short-message service (SMS-PP service) of the GSM 
network, a new set of e xp e ndabl e) single-use passwords for use in logging-on to the service when 
each of the passwords stored at the terminal device has been used to remotely log-on to the 
service from the terminal device, and for receiving the new set of oxpondablo single-use 
passwords transmitted from the server using the short-message service. 
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